9962 matches found
MAL-2025-39001 Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)
The package webdriverio-nucleosynthesis-fork-dotenv-parse-variables was found to contain malicious code...
MAL-2025-17865 Malicious code in cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables (npm)
The package cybernetics-terser-webpack-plugin-phenomic-dotenv-parse-variables was found to contain malicious code...
Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)
The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...
Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...
Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)
The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...
MAL-2025-18665 Malicious code in dotenv-parse-variables-xanthus-nestjs-playwright (npm)
The package dotenv-parse-variables-xanthus-nestjs-playwright was found to contain malicious code...
MAL-2025-30975 Malicious code in pyxis-antimatter-dotenv-parse-variables-xenos (npm)
The package pyxis-antimatter-dotenv-parse-variables-xenos was found to contain malicious code...
MAL-2025-18663 Malicious code in dotenv-parse-variables-norma-adonis-duplex (npm)
The package dotenv-parse-variables-norma-adonis-duplex was found to contain malicious code...
MAL-2025-18664 Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)
The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code...
MAL-2025-23275 Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)
The package interferometry-bootes-gridsome-dotenv-parse-variables was found to contain malicious code...
MAL-2025-15236 Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
The package axios-carpo-spectroscopy-dotenv-parse-variables was found to contain malicious code...
Malicious code in graviton-dactyl-helmet-dotenv-parse-variables (npm)
The package graviton-dactyl-helmet-dotenv-parse-variables was found to contain malicious code...
MAL-2025-29302 Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm)
The package pino-pretty-deneb-dotenv-parse-variables-hugo was found to contain malicious code...
CVE-2025-7971
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...
CVE-2025-7971
CVE-2025-7971 affects Rockwell Automation’s Studio 5000 Logix Designer. The issue arises from unsafe handling of environment variables, where a path without a valid file can cause the application to crash and, in some cases, may allow arbitrary code execution locally. The available connected sour...
httpd: insufficient escaping of user-supplied data in mod_ssl
A vulnerability was found in the Apache HTTP Server. Insufficient escaping of user-supplied data in modssl allows an untrusted SSL/TLS client to insert escape characters into log files in some configurations. In a logging configuration where CustomLog is used with "%varnamex" or "%varnamec" to...
Rockwell Automation Studio 5000 Logix Designer security vulnerabilities
Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. A security vulnerability exists in Rockwell Automation Studio 5000 Logix Designer that stems from improper handling of environment variables could...
CVE-2025-7971: Improper Input Validation
A security issues exists within Studio 5000 Logix Designer due to unsafe handling of environment variables. If the specified path lacks a valid file, Logix Designer crashes; However, it may be possible to execute malicious code without triggering a crash...
PT-2025-33298 · Rockwell Automation · Studio 5000 Logix Designer
Name of the Vulnerable Software and Affected Versions: Studio 5000 Logix Designer affected versions not specified Description: A security issue exists in Studio 5000 Logix Designer related to unsafe handling of environment variables. When a specified path does not contain a valid file, the softwa...
CVE-2025-8860
A flaw was found in QEMU in the uefi-vars virtual device. When the guest writes to register UEFIVARSREGBUFFERSIZE, the .write callback uefivarswrite is invoked. The function allocates a heap buffer without zeroing the memory, leaving the buffer filled with residual data from prior allocations. Wh...